Heap-based Buffer Overflow Vulnerability in HOME SPOT CUBE2 by Aterm
CVE-2024-23978

9.8CRITICAL

Key Information:

Vendor: Kddi Corporation
Status: Home Spot Cube2
Vendor: CVE Published:; 2 February 2024

🔔 Create Kddi Corporation Vulnerability Alert

What is CVE-2024-23978?

A heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier versions. This vulnerability allows an attacker to execute arbitrary code by processing invalid values within the device. Given that the affected products are no longer supported, users remain at significant risk if they continue to utilize these devices without applying necessary mitigations or seeking alternatives.

Affected Version(s)

HOME SPOT CUBE2 V102 and earlier

References

https://www.au.com/support/service/mobile/guide/wlan/home...

https://jvn.jp/en/vu/JVNVU93740658/

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 2, 2024
Vulnerability Reserved
Jan 25, 2024

CVE-2024-23978 Data

JSON